Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
9Static
static
9zonesszanp...��.exe
windows7-x64
8zonesszanp...��.exe
windows10-2004-x64
8zonesszanp...EL.dll
windows7-x64
8zonesszanp...EL.dll
windows10-2004-x64
8zonesszanp...��.url
windows7-x64
1zonesszanp...��.url
windows10-2004-x64
1zonesszanp...��.url
windows7-x64
1zonesszanp...��.url
windows10-2004-x64
1General
-
Target
53f3ec84c576030aa0ae3b2c25c5999e8efa5fd924ec4a2d09c3368a12b82f92
-
Size
1.1MB
-
Sample
221125-xwhj4scb5y
-
MD5
a0911f8e1568b42a623a93fa7ae4bd4a
-
SHA1
2db3ef2e1960bf7ddaab36c722e847ed59ba3c18
-
SHA256
53f3ec84c576030aa0ae3b2c25c5999e8efa5fd924ec4a2d09c3368a12b82f92
-
SHA512
2d9e473055cfc7e3345c0ece57252d3ac7c3de26cae935429e7c695fd8031594fc518b6d527e82b4a91b371c878f6389627dee628e46d2de6e78f9e72353967c
-
SSDEEP
24576:eO6zCID74LVuKp8Mly9CeHmSqvHqZICaaGaQGOEA+U+gYt4FoSZRlg:eOiV0LsKpjlACeIqZI3nahA+U/FoSHG
Behavioral task
behavioral1
Sample
zonesszanpinglun-v1.0/QQ空间秒赞秒评论(秒赞贴吧).exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
zonesszanpinglun-v1.0/QQ空间秒赞秒评论(秒赞贴吧).exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
zonesszanpinglun-v1.0/SkinH_EL.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
zonesszanpinglun-v1.0/SkinH_EL.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
zonesszanpinglun-v1.0/去脚本之家看看.url
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
zonesszanpinglun-v1.0/去脚本之家看看.url
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
zonesszanpinglun-v1.0/服务器软件.url
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
zonesszanpinglun-v1.0/服务器软件.url
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
zonesszanpinglun-v1.0/QQ空间秒赞秒评论(秒赞贴吧).exe
-
Size
1.6MB
-
MD5
f29d9bca9f069a84076593270496e3a1
-
SHA1
a6f907bd2dfdd4ab81f9ebe3cb070c5430ed8632
-
SHA256
d30c3cf612a35cf8bd52582f006afb580ebdad17c648a09b54cf6bbb2fd6ee57
-
SHA512
4915962d2ead9bf33433d778b34abd2ccad4367d8adf191ec0d9e7551bfc8fa5d0e50d60fee4fa1feef8e3bff3d9c3c285e3d7513743afed1221fd3f9c8c7dbf
-
SSDEEP
24576:B6m4SE6FSbxSDQxlTZaqdiXSp0c02uFG6dAk3CMbES:BXEJAAlTZaqdwk0c05HGibN
Score8/10-
Adds Run key to start application
-
-
-
Target
zonesszanpinglun-v1.0/SkinH_EL.dll
-
Size
86KB
-
MD5
147127382e001f495d1842ee7a9e7912
-
SHA1
92d1ed56032183c75d4b57d7ce30b1c4ae11dc9b
-
SHA256
edf679c02ea2e170e67ab20dfc18558e2bfb4ee5d59eceeaea4b1ad1a626c3cc
-
SHA512
97f5ae90a1bbacfe39b9e0f2954c24f9896cc9dca9d14364c438862996f3bbc04a4aa515742fccb3679d222c1302f5bb40c7eaddd6b5859d2d6ef79490243a4d
-
SSDEEP
1536:s5Np2dgZgIehUUS3E1Ujmrvl179D53UWnGQRJZiXRmrCnKptnouy8K:s5Np2dlUX0+Cx17F8QRJZKmOK3outK
Score8/10 -
-
-
Target
zonesszanpinglun-v1.0/去脚本之家看看.url
-
Size
124B
-
MD5
9d9c794d654383c012286b258556fe46
-
SHA1
8266c2159f57859ff102df419a94157a2ccef61f
-
SHA256
c4965fa0cf71f391518797b3cc3b7ffef0ec991c5266f5f9cc90298a7da7e1da
-
SHA512
28b9a9519a0fb7e826adaf43e76dfd11df323f20ab3089ec53c6263a51c06635c9d0b0a325cb7d20f7db42734dc257666e77d63be620aca34cdb13b766da9bbe
Score1/10 -
-
-
Target
zonesszanpinglun-v1.0/服务器软件.url
-
Size
112B
-
MD5
db4aa2c6c4e0555b3968690756e24836
-
SHA1
96933b815ecdcf2fd43bd2ef036260029a633801
-
SHA256
c85359e7af5e102716e42f659fd5c1931b553761898714ccbb261883a03f40e1
-
SHA512
6ca491f92f9990d706b75e7ff091f8c025de7d9dc438aa25cf6e8baa87e750f6f0490e9923d82aa00ac074b572468349ed52c2765ec1fd3183a9ea146a2ff5c3
Score1/10 -